General
- Target 2026-10-25_ff7d26b881f3521befc94f3ec658292c_amadey_elex_smoke-loader_stop
- Size 485KB
- Sample261026-e5ynkszz2k
- SHA256 888eaecb8f7e172ee029fcd7913a0267edc947e548689991d42f488496b56396
- MD5 ff7d26b881f3521befc94f3ec658292c
- SHA1 bbe2369954effdf85e0113a9e36e2b9633b95690
- SHA512 76948a3dbaf437cc3b864ccfb92724b0b4f53d9b1f03f0031ffb01d7a9431b15423dccafda319e957ebbe1b1ae3d62279b6fee061152edcf14911bd4917ca2d3
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYpW:BOlx4kk9HKda4YBQi4kVdcQzj9
- TLSH T162B4BE217780C035E3A623328996E1B46A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_ff7d26b881f3521befc94f3ec658292c_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-25_ff7d26b881f3521befc94f3ec658292c_amadey_elex_smoke-loader_stop
- Size 485KB
- SHA256 888eaecb8f7e172ee029fcd7913a0267edc947e548689991d42f488496b56396
- MD5 ff7d26b881f3521befc94f3ec658292c
- SHA1 bbe2369954effdf85e0113a9e36e2b9633b95690
- SHA512 76948a3dbaf437cc3b864ccfb92724b0b4f53d9b1f03f0031ffb01d7a9431b15423dccafda319e957ebbe1b1ae3d62279b6fee061152edcf14911bd4917ca2d3
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYpW:BOlx4kk9HKda4YBQi4kVdcQzj9
- TLSH T162B4BE217780C035E3A623328996E1B46A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE